An electronic attestation is a digitally signed statement that confirms an identity attribute, qualification, or right. It is issued by an authoritative organization and can be presented electronically, for example from a digital identity wallet. A verifier checks the signature and relevant trust information to determine whether the statement is authentic and valid.
In cyber security, attestations can support access decisions without relying only on passwords or asking users to submit broad identity documents. A service might verify a specific attribute needed for access, while requesting no unnecessary information. Defenses should validate attestations server-side, check expiry and revocation where supported, protect certificates and keys, and request only the data required. A valid signature alone does not guarantee that an attestation is current, appropriate for the service, or issued by a trusted source.